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IN THE CLAIMS 

Amended claims follow; 

1 . (currently amended): A system for distributing portable computer 
virus defitiition records with binary file conversionj comprising: 

a structured virus database storing one or more virus definition records, 
each virus definition record comprising: 

an identifier uniquely identifying a computer virus; 

at least one virus name associated with the computer virus; 

a virus definition sentence comprising object code providing 
operations to detect the identified computer virus within a computer system; and 

a virus removal sentence comprising object code providing 
operations to clean the identified computer virus from the computer system; 

a client database engine storing at least one updated virus definition record 
into the structured virus database indexed by the identifier and the at least one 
virus name for each virus definition record; 

a converter converting the virus definition records stored in the structured 
virus database into a virus data file comprising virus definition sets, each virus 
definition set comprising: 

binary data encoding instructions to detect the computer virus 
within a computer system, wherein the instructions comprise the object code to 
detect the identified computer virus; 

binary data encoding instructions to clean the computer vims from 
the computer system, wherein the instructions comprise the object code to clean 
the identified computer virus; and 

names associated with the computer virus; 
a client anti- virus laneruage decompiler converting each virus definition set 
in the virus data file into a \dms definition record: and 
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a server database engine comparing subsequently modified versions of the 
structured virus database to form a delta set of virus defmition records, wherein 
the client database engine stores the delta virus defmition records set into the 
structured virus database; 

wherein the ser\^er database engine builds the virxis definition records into 
the structured virus database by generating tlie identifier for each virus definition 
record and populating each virus definition record with the virus definition 
sentence and the virus removal sentence for the computer virus; 

wherein at least one of the database engines accesses the virus definition 
records in the structured virus database to perform at least one of adding, 
removing, and replacing a virus definition record . 

2. (cancelled) 

3. (canceled) 

4. (cancelled) 

5. (previously presented): A system according to Claim 1, further 
comprising: 

a server anti -virus language decompiler converting each virus definition 
set in the virus data file into a virus definition record. 

6. (cEincelled) 

7. (original): A system according to Claim 1, fiarther comprising: 

a compression module compressing the structured virus database prior to 
transfer; and 

a decompression module decompressing the structured virus database 
subsequent to transfer. 
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8. (original): A system according to Claim 1 , further comprising: 
an encryption module encrypting the structured virus database prior to 

transfer; and 

a decryption module decryptitxg the structured virus database subsequent 
to transfer. 

9. (original): A system according to Claim 1, wherein the structured 
virus database is a relational database. 

1 0- (currently amended): A method for distributing portable computer 
virus definition records with binary file conversion, comprising: 

storing one ot more virus definition records into a structured virus 
database, each virus definition record comprising: 

an identifier uniquely identifying a computer virus; 
at least one virus name associated with the computer virus; 
a virus definition sentence comprising object code providing 
operations to detect the identified computer virus within a computer system; and 

a virus removal sentence comprising object code providing 
operations to clean the identified computer virus from the computer system; 

storing at least one updated virus definition record into the structured virus 
database indexed by the identifier and the at least one virus name for each virus 
definition record; 

converting the virus definition records stored in the structured virus 
database into a virus data file comprising virus definition sets, each virus 
definition set comprising: 

binary data encoding instructions to detect the computer virus 
within a computer system, wherein the instructions comprise the object code to 
detect the identified computer virus; 
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bitxary data encoding instructions to clean the computer virus from 
the computer system, wherein the instructions comprise the object code to clean 
the identified computer virus; and 

names associated with the computer vims; 
comparing subsequently modified versions of the structured virus database 
to form a delta set of virus definitioix records; and 

storing the delta virus definition tecords set into the structured virus 
database; 

wherein a cli ent anti-virus language decompiler converts each virus 
definition set in the v irus data file into a virus definition record: 

wherein a server database engine builds the virus definition records into 
the structured virus database by generating the identifier for each virus definition 
record and populating each virus definition record with the virus definition 
sentence and the virus removal sentence fox the computer virusi 

wherein the server databas e endne accesses the virus definition records in 
the structured virus da tabase to perform at least one of adding, removing, and 
replacing a virus definition record . 

11. (cancelled) 

12. (canceled) 

13. (cancelled) 

14. (cancelled) 

15. (cancelled) 

1 6. (original); A method according to Claim 1 0, fijrther comprising: 
compressing the structured virus database prior to transfer; and 
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decompressing the structured virus database subsequent to transfer. 

1 7. (original): A method according to Claim 10, further comprising: 
encrypting the structured virus database prior to transfer; and 
decrypting the structured virus database subsequent to transfer. 

18. (original); A method according to Claim 10, wherein the structured 
virus database is a relational database. 

19. (original): A computer-readable storage medium holding code for 
performing the method of Claim 10. 

20. (currently amended); A method for updating a binary computer 
virus data file fi-om virus definition records stored in a structured virus database, 
comprising: 

means for storing virus defmition records into a structured virus database, 
each virus definition record comprising an identifier, at least one virus name, a 
virus definition sentence defining operations to detect the identified computer 
virus, and a virus removal sentence defining operations to clean ofiF the identified 
computer virus; 

means for comparing subsequently modified versions of the structured 
virus database to form a delta set of virus definition records; 

means for storing the delta virus definition records set into the structured 
virus database; 

means for converting the virus definition records stored in the structured 
virus database into a virus data file comprising virus definition sets, each virus 
definition set comprising binary instructions wherein the binary instructions 
comprise the object code to detect the computer vims, binary instructions wherein 
the binary instructions comprise the object code to clean off the computer virus, 
and names associated with the computer virus; 
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means for comparing subsequently modified versions of the sto.TCtured 
virus database to form a delta set of virus definition records; 

means for storing the delta virus definition records set into the structured 

virus database; eeid 

means for building the virus definition records into the structured virus 
database by generating the identifier for each virus definition record and 
populating each virus definition record with the virus definition sentence and the 
virus removal sentence for the computer virus; 

pftans for convertipg each virus definition set in the virus data fi le into a 
virus definition record: and 

means for access irn r the vim-! definition r ecords in the structured virus 
database to perform at least one of addin ff^ removing, and replacing a virus 
definition record. 
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